| DISA_STIG_VMware_vSphere_8.0_vCenter_Appliance_ESX_Agent_Manager_EAM_v2r2.audit from DISA VMware vSphere 8.0 vCenter Appliance ESX Agent Manager EAM STIG v2r2 | |
| VCEM-80-000001 - The vCenter ESX Agent Manager service must limit the number of maximum concurrent connections permitted. | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| VCEM-80-000005 - The vCenter ESX Agent Manager service cookies must have secure flag set. | ACCESS CONTROL |
| VCEM-80-000013 - The vCenter ESX Agent Manager service must initiate session logging upon startup. | AUDIT AND ACCOUNTABILITY |
| VCEM-80-000014 - The vCenter ESX Agent Manager service must produce log records containing sufficient information regarding event details. | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| VCEM-80-000025 - The vCenter ESX Agent Manager service logs folder permissions must be set correctly. | AUDIT AND ACCOUNTABILITY |
| VCEM-80-000034 - The vCenter ESX Agent Manager service must limit privileges for creating or modifying hosted application shared files. | CONFIGURATION MANAGEMENT |
| VCEM-80-000036 - The vCenter ESX Agent Manager service must disable stack tracing. | CONFIGURATION MANAGEMENT |
| VCEM-80-000037 - The vCenter ESX Agent Manager service must be configured to use a specified IP address and port. | CONFIGURATION MANAGEMENT |
| VCEM-80-000057 - The vCenter ESX Agent Manager service must be configured to limit data exposure between applications. | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCEM-80-000062 - The vCenter ESX Agent Manager service must be configured to fail to a known safe state if system initialization fails. | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCEM-80-000065 - The vCenter ESX Agent Manager service must set URIEncoding to UTF-8. | SYSTEM AND INFORMATION INTEGRITY |
| VCEM-80-000067 - The vCenter ESX Agent Manager service "ErrorReportValve showServerInfo" must be set to "false". | SYSTEM AND INFORMATION INTEGRITY |
| VCEM-80-000070 - The vCenter ESX Agent Manager service must set an inactive timeout for sessions. | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| VCEM-80-000081 - The vCenter ESX Agent Manager service must offload log records onto a different system or media from the system being logged. | AUDIT AND ACCOUNTABILITY |
| VCEM-80-000124 - The vCenter ESX Agent Manager service must enable STRICT_SERVLET_COMPLIANCE. | CONFIGURATION MANAGEMENT |
| VCEM-80-000125 - The vCenter ESX Agent Manager service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive. | ACCESS CONTROL |
| VCEM-80-000126 - The vCenter ESX Agent Manager service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive. | ACCESS CONTROL |
| VCEM-80-000127 - The vCenter ESX Agent Manager service must configure the "setCharacterEncodingFilter" filter. | SYSTEM AND INFORMATION INTEGRITY |
| VCEM-80-000129 - The vCenter ESX Agent Manager service cookies must have the "http-only" flag set. | ACCESS CONTROL |
| VCEM-80-000130 - The vCenter ESX Agent Manager service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands. | ACCESS CONTROL |
| VCEM-80-000134 - The vCenter ESX Agent Manager service shutdown port must be disabled. | CONFIGURATION MANAGEMENT |
| VCEM-80-000136 - The vCenter ESX Agent Manager service debug parameter must be disabled. | CONFIGURATION MANAGEMENT |
| VCEM-80-000137 - The vCenter ESX Agent Manager service directory listings parameter must be disabled. | CONFIGURATION MANAGEMENT |
| VCEM-80-000138 - The vCenter ESX Agent Manager service deployXML attribute must be disabled. | CONFIGURATION MANAGEMENT |
| VCEM-80-000139 - The vCenter ESX Agent Manager service must have Autodeploy disabled. | CONFIGURATION MANAGEMENT |
| VCEM-80-000140 - The vCenter ESX Agent Manager service xpoweredBy attribute must be disabled. | CONFIGURATION MANAGEMENT |
| VCEM-80-000141 - The vCenter ESX Agent Manager service example applications must be removed. | CONFIGURATION MANAGEMENT |
| VCEM-80-000142 - The vCenter ESX Agent Manager service default ROOT web application must be removed. | CONFIGURATION MANAGEMENT |
| VCEM-80-000143 - The vCenter ESX Agent Manager service default documentation must be removed. | CONFIGURATION MANAGEMENT |
| VCEM-80-000144 - The vCenter ESX Agent Manager service files must have permissions in an out-of-the-box state. | CONFIGURATION MANAGEMENT |
| VCEM-80-000151 - The vCenter ESX Agent Manager service must disable "ALLOW_BACKSLASH". | CONFIGURATION MANAGEMENT |
| VCEM-80-000152 - The vCenter ESX Agent Manager service must enable "ENFORCE_ENCODING_IN_GET_WRITER". | CONFIGURATION MANAGEMENT |
| VCEM-80-000154 - The vCenter ESX Agent Manager service manager webapp must be removed. | CONFIGURATION MANAGEMENT |
| VCEM-80-000155 - The vCenter ESX Agent Manager service host-manager webapp must be removed. | CONFIGURATION MANAGEMENT |
